What Pynt is
Pynt has created an elegant solution for running DAST type scanning against your APIs by running tests via a local proxy. This helps to bypass a lot of the pain with configuring DAST tools against your endpoints. They also do API discovery, drift detection, and testing via network integrations. The vendor site is www.pynt.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Pynt covers
Pynt is in the catalog for these capabilities. Categories: DAST and API Security.
How to evaluate Pynt in a security program
Use Pynt as a stack candidate, not as diligence evidence. The oneNorma score for Pynt is 5.5/10 (percentile 65). If the real gap is in DAST and API Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.pynt.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
